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(57) ABSTRACT 

An anti-piracy system reduces the opportunity for piracy and 
illicit use of software products by requiring each software 
product to be registered for a single computer. If a user 
attempts to install the software product on another computer, 
the software product will recognize a different hardware 
composition and disable itself. During installation, the soft- 
ware product generates a hardware ID that identifies the set 
of hardware components and sends it and a product ID to a 
registration authority. The registration authority computes a 
registration ID from the product ID and the hardware ID and 
sends the registration ID back to the software product. Each 
time the software product is subsequently launched, the 
software product computes its own test ID from the product 
ID and hardware ID using the same algorithm employed by 
the registration authority. The software product then com- 
pares the test ID to the registration ID. If the two match, the 
software product is enabled; otherwise, if no match occurs, 
the software product is locked. The system flexibly accom- 
modates a situation in which the user upgrades one or a few 
components in the computer without creating a new 
machine. The software product determines whether a new 
set of hardware components in the computer is substantially 
different from the original set of hardware components. If 
not substantially different, the upgraded computer is more 
like the original computer and the software product is 
permitted to operate; otherwise, the computer more 
resembles a new computer and the software product is 
prevented from operating. 

39 Claims, 6 Drawing Sheets 
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SOFTWARE ANTI-PIRACY SYSTEM THAT a CD-ROM or floppy diskette. The disk 20 is packaged to 

ADAPTS TO HARDWARE UPGRADES form a shrink-wrap retail product 22. The manufacturer 

generates and assigns a serialized key that uniquely identi- 

TECHNICAL FIELD fies that product. For instance, the key might consist of a 

. . ttii- 5 manufacturer ID, a serialized incrementing number, a reg- 

This invention relates to systems and methods for pre- • . j j*j j ui i t-u i ■ 

..... J - w t . , . istered product code, and a checksum value. The key is 

venting piracy or illicit use of software. More particularly, • ♦ j t u i <*a j az * u .u j . 

. . . & v . J . , , t , L I . . ,i printed on a label 24 and affixed somewhere on the product, 

this invention relates to such systems and methods that allow , , pn Dnu r 

./-.I ii« ..i sucn as tne uu-tvUivi case, 

hardware components of the underlying computer to be ^ 

upgraded and the software to be legitimately installed on the in . Dunn S illation the purchaser of the software product 

upgraded machine without triggering the anti-piracy protec- 10 ls P rom P ted * enter ^ ^ Th * step alone is designed to 

t - Qn prevent another party from obtaining the disk 20 only, 

without knowledge of the key, and installing the product 

BACKGROUND illegally. Without the key, the holder of the physical disk is 

prevented from installing the product. 

Computer software is a unique consumer product in that is ^ duct lracks the number of inslallations . 0 nce the 

the same product can be replicated many times after being rchaser enlers the same k more times than a defined 

sold. Once a software product is sold, typically as software ^ the pfoduct {s disabkd The purchaser is then forced 

code on a computer-readable disk, the purchaser can easily tQ all the manufacturer f 0f assistance, 

copy the code to other computer- readable media thereby . . , . . . 

v t - tU j « *• While such mechanisms help reduce illicit copying, they 

replicating the same product many times over. 20 r . it _ . , . c r • 

0 r . often cause other problems in the form of consumer mcon- 

This characteristic of software can be a tremendous venience . For i DSta nce, the premise that more installations 

benefit in terms of lowering manufacturing costs and facili- than a requisile nurnber means illegal ^ may be wrong in 

tating distribution. For instance, easy replication allows a some cases A ^ who has upgraded his/her co mpul ^ f or 

software manufacturer to distribute one physical copy of the example, should be able to legitimately reinstall the software 

software product and sell a multi-seat license that legally 25 product Qn thfi ^ gTaM machine . However, if the requisite 

empowers the purchaser to install the software product on number of ^^^3 has already been reached> the prod . 

many different computers. uct win not install> f orcing the ^ ( who is now d is grU ntled) 

Unfortunately, this benefit comes at a cost of open abuse. to call the manufacturer for assistance. 

One well-known abuse is piracy. An unscrupulous party can Accordingly, there remains a need for improved technol- 

obtain a copy of the object code (legally or illegally) and ogy somt ions to piracy and illicit use, but which also 

then illicitly replicate and resell pirated copies of the prod- recognizes and accommodates the needs and practices of a 

uct. Software companies attempt to monitor piracy legitimate purchaser 
activities, but detection is often difficult. Moreover, even 

when improper activity is detected, enforcement and legal SUMMARY 

recourse is often unavailable from a practical standpoint, 35 This invention concerns an anti-piracy system and method 

particularly since much of the abuse occurs in foreign lands. that reduces the op p 0rtumtv for piracy and illicit use of 

A less subtle abuse is the improper use of the software software products by requiring each software product to be 

product beyond the scope of the license. One common registered for a single computer that consists of a specific 

scenario involves a shrink-wrap software product available 4Q hardware composition. If a user attempts to install the 

at local retail stores. The product is typically accompanied software product on another computer, the software product 

by a shrink-wrap license to install and use the product on one will recognize a different hardware composition and disable 

computer, and perhaps additionally on a laptop. itself 

Unfortunately, the purchaser may intentionally or uninten- According to one aspect of the invention, the system 
tionally install the product on more than the allowed 45 indues a software product that is loaded onto a specific 
computers, thereby violating the license. For the software computer having a set of hardware components (e.g., RAM, 
manufacturer, this form of abuse is very difficult to monitor hard disk drive, floppy disk drive, BIOS, network card, 
and even more difficult to prosecute. video card> etc ) j^e software product has an associated 
The computer software industry estimates that billions of product ID consisting of, for example, a manufacturer ID, a 
dollars are lost each year due to piracy and other illicit uses. 50 registered product code, a serialized number, and a check- 
While licenses provide a legal avenue for recourse against sum value. 

such practices, the practicality of detecting and enforcing During installation, the software product generates a 

often prove too onerous for the manufacturer. Accordingly, hardware ID that identifies the set of hardware components, 

software companies have a real incentive to reduce the As an example, the software product generates a five-digit 

amount of abuses through other means. 55 hardware ID that includes a bit representing each of five 

One conventional technique for preventing unlimited system components: BIOS, a video BIOS in the video card, 

copying of a software product is to design the code with a RAM, a hard disk drive, and a floppy disk drive. The bit for 

self-regulating mechanism that prevents repeated installa- a given system component can be derived in different ways, 

tions. This mechanism counts the number of installations such as performing a modulo operation on all or part of the 

and disables the software code after the product has been 6 o BIOS, or on the hard disk drive's serial number, 

installed a certain number of times. The underlying premise The software product concatenates the product ID and 

is that multiple installations tend to indicate that the user is hardware ID and sends it to a registration authority, such as 

attempting to install the product on multiple different the product manufacturer or an authorized third party. The 

computers, rather than just one computer allowed by the registration authority has a registration unit that computes a 

license. 65 registration ID from the product ID and the hardware ID. 

FIG. 1 illustrates this concept. A manufacturer creates a One preferred approach is to hash the concatenation of the 

software product and places the code on a disk 20, such as product ID and hardware ID to produce the registration ID. 
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The registration authority stores the registration ID, product ity for installation and use on a particular computer. The 

ID, and hardware ID in a database. The registration authority system 30 includes a customer computer 32 and a registra - 

sends the registration ID back to the software product, where lion server 34, which resides at the registration authority 

the registration ID is stored locally on the computer. remote from the customer The customer computer 32 and 

Each time the software product is subsequently launched, 5 registration server 34 arc interconnected by a network 36 to 

the software product again obtains the product ID and P r0Vlde d f ta communication. In the absence of a customer 

generates the hardware ID for the computer. The software S°T I * * T 9 man " fa ^ urer or l ™ 

° . . 4 4in / lL i . tt^ third party may provide proxy access to the registration 

product then computes its own test ID from the product ID u .u u i * -i c u- 

r , , , IT ^ r . , server by other means, such as electronic man, fax machine, 

and hardware ID using the same algorithm (e.g., hashing , ^ Qr te , hone 

algonthm) employed by the registration unit at the registra- 30 r _ . 

«u -ru Ct a * * , in * For discussion purposes, the customer computer is 

tion authority. The software product compares the test ID to ... . r , , . \ 

the registration ID. If the two match, the software product is dcscr * ed as a P cr ^ nal com P uter > f" ch as u a deskt °P ° r 

enabled to operate on the computer; otherwise, if no match P orta ^ le However . as us f, d herein - the ' erm com - 

f( i i * | | i . , i £ puter is intended to mean essentially any type of computing 

occurs, the software product is locked and prevented from K. . ,. . . , * r ■ K 

.... . -e device or machine that is capable of running a software 

operating on the computer. is . , , . . . , . 

_ , . , . , . . m . (1 product, including such devices as communication devices 

In the typical case, the test and registration IDs will not ( telephones, electronic books, electronic maga- 

match if the hardware ID is changed This indicates that the ^ an£ , etc ) and al and home 

underlying hardware has been altered, either through sumer devices ( handhe , d CQ Web-enabled 

upgrade or because the user ,s attempting to install the televisions> home aulomalion systemS) multimedia viewing 

product on another computer. At the minimum, the self- systems> etc .). Within the described context; the network 36 

locking mechanism prevents the user from installing the fa representative of an Inleraet or Intranet> or a local or ^ 

software product on multiple different computers. However, area ne(work Ho , he ne(work 36 ^ . le _ 

the system is also sensitive to the situation in which the user mcmed jn ffla differenl f includi bQth wire . based 

simply upgrades one or a few components in the computer nctworks ( cabl telcphone flber 0 ti etc ) and wire . 

without crlectively crcatmg a new machine. « ^ networks fe .g., RF, satellite, microwave, etc.). 

In this situation, the software product determines whether FIG. 3 shows the customer computer 32 within an exem- 
a new set of hardware components in the computer is , implementation of a personal computer. The computer 
substantially different from the original set of hardware 32 jndudes [he processing unit 4^ system memory 42; and 
components. If only one or a few components are different a , em bus 44 (h> , interconnects various system 
(e.g not more than two out of five components), the exponents, including the system memory 42 to the pro- 
upgraded computer is more like the original computer and ccssi unit 40 Thc tcm bus 44 ma be imp iemcntcd as 
the software product is permitted to operate. Conversely, if Qne of S£veral bm stnlctures and any of a variet 
many or aU components are different (e g., more than two o£ bus arcni , e ctures, including a memory bus or memory 
out of five components), the "upgraded" computer more conlroller> a peripheral bus> and a [ocal bus . The system 
closely resembles a new computer and the software product me 42 read om mem ^ QM> 46 and 
is prevented Irom operating on this new computer without random access memo (RAM) 48. A basic input/output 
an additional license from the registration authority. sys , em 5Q (BI0S) b st0fed in RQM 4fi 

One way the software product makes this determination is ^ customer computer 32 may have one or more of the 

by trying different permutations of the hardware ID, chang- 4 „ fo i lowing drives: a hard disk drive 52 for reading from and 

ing at least one bit per try while leaving other bits wriliag t0 a hard disk or hard disk array . a magnetic disk 

unchanged. Each modified hardware ID is concatenated with drive 54 for readi from or writi t0 a rem o Va ble magnetic 

the product ID, and then hashed to produce the test ID. If as disk 56; and an optical disk drfve 58 for reading from or 

a result of this tnal-and-error process the test and registra- writing t0 a rera ovable optical disk 60 (e.g., CD ROM or 

tion IDs match, the software product is assured that only a 4J ot|)er optical media) xhe hard disk drive S2< magnetic disk 

few of thc components have been altered, and the product is drive 54> and optical disk drjve 58 are to the 

permitted to run. system bus 44 by a hard disk drjve i nler f ac;6 <; 2) a magnetic 

BRIEF DESCRIPTION OF THE DRAWINGS c " s ' c drive interface 64, and an optical drive interface 66, 

.... . . . respectively. The drives and their associated computer- 

FIG. 1 is a diagrammatic illustration of a prior art manu- 5Q feadable media ide nonvolatile st of ^puter 

factunng and packaging process to produce a shrink-wrap readable instructionS) data struct ures, program modules and 

software product. other daU fof the computcr 32< It i s notcc j lnat olher typcs 0 f 

BG. 2 is a block diagram of an anti-piracy system that computer readable media may also be used to store data, 

facilitates registration of a software product for installation other such media include magnetic cassettes, flash memory 

and use on a particular computer. 55 cards> digital video disks> Bernoulli cartridges, random 

FIG. 3 is a block diagram of an exemplary computer. access memories (RAMs), read only memories (ROM), and 

FIG. 4 is a flow diagram showing steps in a method for the like, 

registering thc software product for use on thc computer. A number of program modules may be stored on thc hard 

FIG. 5 is a flow diagram showing steps in a method for disk, magnetic disk 56, optical disk 60, ROM 46, or RAM 

running the software product on the computer. 60 48. These programs include an operating system 68, one or 

FIG. 6 is a flow diagram showing steps in a method for more application programs 70, other program modules 72, 

running the software product after the computer has been and program data 74. The operating system 68 is preferably 

upgraded. a Windows brand operating system (e.g., Windows NT, 

Windows 98, Windows CE, etc.), although other types of 

DETAILED DESCRIPTION 65 operating systems may be used. In this implementation, the 

FIG. 2 shows an anti-piracy system 30 that facilitates software product can be implemented as one of the programs 

registration of a software product with a registration author- 70. 
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An operator may enter commands and information into serial number. Table I shows an example construction of a 
the computer 32 via input devices such as a keyboard 76 and 5-bit hardware I D, and how the bits are derived from the 
a mouse 78. Other input devices (not shown) may include a corresponding component, 
microphone, joystick, game pad, satellite dish, scanner, or 

the like. These and other input devices are connected to the 5 TABLE 1 

processing unit 40 through a serial port interface 80 that is 
coupled to the system bus 44, but may alternatively be 
connected by other interfaces, such as a parallel port, game 
port, or a universal serial bus (USB). A monitor 82 or other 
type of display device is also connected to the system bus 44 
via an interface, such as a video adapter 84. The video 
adapter 84 has a video BIOS (VBIOS) 86. The computer 32 
has a network interface or adapter 88, a modem 90, or other 
means for establishing communications over the network 
36. 
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It is once again noted that the computer shown in FIG. 3 

is just one possible type of computing device that can be 11 is noted thal other hardware components may be used, 

used to implement aspects of this invention. Other types of For instance, many computers are equipped with a network 

computers may be used carc * w * tn a umc l ue 128 -bit address. A bit for the hardware ID 

„ f . , - . „ , ,20 can be derived from this global network card address. 

With reference again to FIG. 2, the customer purchases a Moreover , more than> or fewer than five system compon ents 

software product for running on the computer 32. In this may 5e mQ6 t0 derive the hardware id. 

illustration, the software product is in the form of a shrink- The product in this example concat enates the 

wrap product 22 having a software program stored on a 15 _ bit product ID with the 5 _ bit hardwarc ID , and sends the 

transportable computer-readable medium, such as a 20-bit value over the network 36 to the registration server 34 

CD-ROM or floppy diskette. In other implementations, the ( step 154 in Fia 4^ TOs phase is pre ferably automated in 

software product may be delivered electronically over a that the software product automatically initiates connection 

network. The customer loads the software product onto the w j tri me registration server 34 to register itself with the 

computer 32 as a program 100 stored in system memory 42. registration authority. 

During installation, the customer is prompted to enter a 3Q Alternatively, the software product supports a registration 

portion of the product ID of the software product. The p ii ot with a graphical user interface (UI) dialog window 

product ID (PID) in this case is the CD key printed on label asking the customer to call a service representative at the 

24 of the shrink-wrap package. The customer enters the registration authority. The UI window lists the product ID 

product ID 102, which is associated with the program 100. and the hardware ID, and includes a entry box to enter the 

Additionally, another portion of the product ID is already 35 registration ID given by the service representative over the 

included in the software program 100 and the software phone. 

product combines the two portions, along with other ^ registration server 34 has a registration unit 110 to 

information, into a product ID that is unique to the specific assign a registration ID (Reg ID) to the software product on 

installation. ^ c customer's computer. The registration unit 110 computes 

As part of the installation process, the customer registers 40 the registration ID from the product ID and the hardware ID 

the software product with the registration authority. This (step 156 in FIG. 4). In the illustrated implementation, the 

authority might be, for example, the product manufacturer or registration unit 110 employs a hashing algorithm 112 to 

an authorized third party. The registration process forces the compute a hash value of the concatenated product ID and 

customer to register the software product for installation and hardware ID. The registration server 34 also maintains a 

use on a specific computer. 45 database 114 to store the product ID, hardware ID, and 

FIG. 4 shows steps in a method for registering the registration ID (step 158 in FIG. 4). Preferably, these IDs are 

software product 100 for installation and use on the com- correlated in a table or other data record 116. 

puter 32. llie method is described with continuing reference The registration server 34 returns the registration ID over 

to FIG. 2. The steps are performed in software by the the network 36 to the customer computer 32 (step 160 in 

software product on the customer computer, and by a 50 FIG. 4). In the manual case, the service representative tells 

registration unit on the registration server. At step 150, the the customer the registration ID over the phone and the 

software product 100 obtains its product ID 102. As an customer enters the registration ID via the UI window. The 

example, the product ID consists of a 5-bit RPC (registered registration ID 118 is stored locally in the system memory 42 

product code) value for the software product, a 3-bit site of the customer computer 32, where it is accessible by the 

value indicating a place of manufacture, and a 7-bit serial- 55 software program 100 (step 162 in FIG. 4), The program 100 

ized number that is incremented with each product, is also equipped with the same hashing algorithm 112 as 

The software product 100 generates a hardware ID (H/W found in the registration unit 110 at the registration server 

ID) that identifies a set of hardware components that make 34. 

up the customer's computer 32 (step 152). The hardware ID FIG. 5 shows steps in a method for running the software 

is a multi-bit value having at least one bit representing each 60 product 100 on the computer 32. The method is described 

of the corresponding system components. As an example, with continuing reference to FIG. 2. The steps are performed 

the software product generates a 5 -bit hardware ID that by software code within the software product on the cus- 

includes a single bit for each of five system components: tomer computer. At step 170, the software product is started. 

BIOS 50, VBIOS 86, RAM 48, hard disk drive 52, and On each launch after installation, the software product 

floppy disk drive 54. A bit for a given system component can 65 obtains the product ID 102 (step 172) and generates the 

be derived in different ways, such as performing a modulo hardware ID from the set of hardware components within 

operation on a chunk of the BIOS, or on the hard disk drive's the computer (step 174). 
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At step 176, the software product 100 computes its own 
test ID from the product ID and hardware ID using the 
hashing algorithm 112. This is the same hashing algorithm 
as employed by the registration unit 110 when computing 
the original registration ID 118. The software product 100 5 
retrieves the original registration ID 118 from memory 42 
(step 178 in FIG. 5) and compares the test ID to the 
registration ID 118 (step 180 in FIG. 5). If the two match 
(i.e., the "yes" branch from step 182), the software product 
is enabled to operate on the computer (step 184). On the 10 
other hand, if no match occurs (i.e., the "no" branch from 
step 182), the software product is locked and prevented from 
operating on the computer (step 186 in FIG. 5). 

The anti-piracy system is effective at stopping repeated 
installation of the same software product on multiple dif- 15 
ferent machines. In the typical case, the test and registration 
IDs will not match if the hardware ID is different now than 
it was when the customer first registered the software 
product with the registration authority. That is, the only thing 
that has changed in the computation of the test and regis- 20 
tration IDs is the hardware ID. The product ID and the hash 
algorithm are the same for both computations. 

A different hardware ID suggests that the underlying 
hardware components have been altered in some manner. 
For instance, reconfiguring the floppy disk drive or replacing 25 
the hard disk drive might change Lhe hardware ID. Of 
course, an entirely different computer with a different set of 
hardware components might also result in a different hard- 
ware ID, 

If an unscrupulous customer attempts to install the prod- 
uct on another computer, the software product will deter- 
mine that the test and registration IDs do not match and will 
self-lock, thereby preventing its operation on the different 
computer. The customer is then forced to contact the regis- 35 
tration authority to obtain a new registration ID, and if 
appropriate, pay an additional licensing fee for an additional 
installation. 

Another advantage is that the anti-piracy system is sen- 
sitive to the situation in which the customer has upgraded 40 
his/her computer, without effectively creating a new 
machine, and is now attempting to reinstall the software 
product on the upgraded computer. In this situation, the 
software product determines whether a new set of hardware 
components in the computer is substantially different from 45 
the original set of hardware components. If only one or a few 
components are different, the upgraded computer is more 
like the original computer and the software product is 
permitted to operate. Conversely, if many or all components 
are different, the "upgraded" computer more closely 50 
resembles a new computer and the software product is 
prevented from operating on this new computer. 

One way the software product makes this determination is 
by trying different permutations of the hardware ID, chang- 
ing at least one bit per try while leaving other bits 55 
unchanged. Each modified hardware ID is concatenated with 
the product ID, and then hashed to produce the lest ID. If this 
trial-and-error process yields a match between the test and 
original registration IDs, the software product is assured that 
only one or a few components have been altered, and the go 
software product is permitted to run. 

FIG. 6 shows steps in a method for running the software 
product 100 on the computer 32 after upgrade. The method 
is described with continuing reference to FIG. 2. The steps 
are performed by software code within the software product 65 
on the customer computer. At step 190, the software product 
changes at least one bit in the hardware ID, while leaving the 
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other bits unchanged, to produce a modified hardware ID. 
For example, the software ID might toggle one bit in the 
5-bit hardware ID, while maintaining the other four bits the 
same. 

The software product concatenates the product ID and 
modified hardware ID (step 192) and computes a new test ID 
using the hashing algorithm 112 (step 194). At step 196, the 
software product retrieves the registration ID 118 from 
memory 42 and compares it to the test ID. If the two match 
(i.e., the "yes" branch from step 198), this suggests that only 
one component has been changed or upgraded, but rest of 
the computer remains substantially the same. Thus, the 
computer is deemed an upgrade, and not a new computer. 
The software product is enabled to operate on the computer 
(step 200 in FIG. 6). 

If no match occurs (i.e., the "no" branch from step 198), 
the software product remains locked. At step 202, the 
software product checks whether it has exhausted all pos- 
sible new combinations of bits. As an example, suppose the 
software manufacturer wants to draw a distinction between 
a computer with one or two new hardware components 
(which the manufacturer deems an "upgrade"), and a com- 
puter with three or more new hardware components (which 
the manufacturer deems a new computer and not an 
"upgrade"). In this case, the software product is configured 
to change at most up to two bits within the five -bit hardware 
ID while keeping al least three bits the same. This process 
essentially determines whether at most two out of the five 
hardware components are different. If the software product 
has not exhausted all available permutations of the hardware 
ID (i.e., the "no" branch from step 202), the software 
product repeats steps 190-198 for the next modified hard- 
ware ID. 

When the software product exhausts all available permu- 
tations without success, this tends to indicate that the com- 
puter is a new computer, not an upgrade. Accordingly, the 
software product remains locked (step 204) and forces the 
customer to contact the registration authority for assistance. 

The an li -piracy system is advantageous in that it allows 
the customer some flexibility to upgrade or modify his/her 
computer without locking out the program. It is noted, 
however, that this method can be circumvented through 
incremental upgrades, where a customer changes out one 
component at a time and reinstalls the software product after 
each component upgrade. However, the incremental upgrade 
approach is most likely not a viable option for the customer 
because it requires a large amount of time to eventually 
create the new computer. 

A variation of the anti-piracy method prevents even the 
incremental upgrade approach, but at the cost of requiring 
the customer to contact the registration authority any time 
the test ID and the registration ID fail to match. When a 
mismatch occurs, the software product initiates a connection 
with the registration server 34 and sends the product ID and 
hardware ID over the network 36. The registration unit 110 
checks the database 114 for any prior records involving the 
product ID. If records with the same product ID exist, the 
registration unit 110 evaluates the hardware IDs associated 
with the product IDs to determine how they have changed. 
For instance, if the two hardware IDs differ in one or two bits 
(which is an acceptable indication of upgrade), the registra- 
tion unit will compute a new registration ID, return it to 
customer computer, and create a new record in the database 
116. This can be the case even if there are multiple entries 
in the database for a single product ID. For instance, further 
analysis might reveal that the hardware ID has remained 
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substantially the same, excepting one or two bits, in each 
table entry for the product ID. 

On the other hand, suppose the registration unit deter- 
mines that any two hardware IDs for the same product ID 
differ by more than two of the five bits. This case indicates 5 
that the computer, albeit incrementally upgraded, has 
become effectively a new computer. In this case, the regis- 
tration unit returns a message denying a new registration ID 
and explaining that a new license is required before the 
product can be reinstalled and run on the new computer. In 3Q 
this manner, the customer cannot incrementally upgrade all 
products in the computer (one at a time) to effectively 
produce a new computer without payment of a new license 
fee. 

Although the invention has been described in language 
specific to structural features and/or methodological steps, it 
is to be understood that the invention defined in the 
appended claims is not necessarily limited to the specific 
features or steps described. Rather, the specific features and 
steps are disclosed as preferred forms of implementing the 
claimed invention. 20 

What is claimed is: 

1. One or more computer-readable media, comprising: 

a software product executable by a computer having a set 
of hardware components, the software product having 
an associated product ID and the software product 25 
being configured to generate a first hardware ID that 
identifies the set of hardware components and to send 
the product ID and first hardware ID to a registration 
authority remote from the computer; 

a registration unit executable by the registration authority, 30 
the registration unit computing a registration ID by 
applying an operation to the product ID and the first 
hardware ID, the registration unit returning the regis- 
tration ID to the software product; 

the software product being further configured to store the 35 
registration ID locally on the computer and, each time 
the software product is subsequently launched on the 
computer: 

generate a second hardware ID that identifies the set of 
hardware components; 40 
apply the operation to the product ID and the second 

hardware ID to derive a test ID; 

compare the test ID to the registration ID; and 

if the test ID substantially matches the registration ID, 
enable execution of the software product on the 45 
computer; and 
if the test ID does not substantially match the registration 

ID, disable execution of the software product on the 

computer. 

2. The one or more computer- read able media as recited in 50 
claim 1, wherein the software product is further configured 

to generate the hardware ID by software product deriving a 
multi-bit hardware ID having multiple bits representing 
corresponding hardware components. 

3. The one or more computer- read able media as recited in 55 
claim 1, wherein the software product is further configured 

to generate the hardware ID by deriving a five -bit hardware 
ID that identifies a set of five hardware components within 
the computer, the five -bit hardware ID having one bit 
representing each of the five hardware components. 60 

4. The one or more computer-readable media as recited in 
claim 1, wherein the registration unit hashes a concatenation 
of the product ID and the hardware ID to derive the 
registration ID, 

5. The one or more computer-readable media as recited in 65 
claim 1, wherein the registration unit stores the product ID, 
hardware ID, and registration ID. 



6. The one or more computer-readable media as recited in 
claim 1, wherein the test ID is deemed to substantially match 
the registration ID if comparing the test ID to the registration 
ID indicates that one hardware component in the set of 
hardware components has been changed since the registra- 
tion ID was computed. 

7. The one or more computer-readable media as recited in 
claim 1, wherein the test ID substantially matches the 
registration ID if comparing the test ID to the registration ID 
indicates that less than one-half of the one hardware com- 
ponents in the set of hardware components have been 
changed since the registration ID was computed, 

8. The one or more computer-readable media as recited in 
claim 1, wherein the hardware ID identifies a set of n 
hardware components, and in the event that the computer is 
upgraded from its original set of hardware components to a 
new set of hardware components in which at least one 
hardware component is different since the last time the 
software product was executed on the computer, the soft- 
ware product determines whether at most one-half of the n 
hardware components are different. 

9. The one or more computer-readable media as recited in 
claim 1, wherein the hardware ID identifies a set of five 
hardware components. 

10. A software product implemented on a computer read- 
able medium, the software product having a corresponding 
original registration ID that represents the software product 
being registered to run on a specific computer having a set 
of hardware components, comprising: 

a code segment to obtain a product ID associated with the 

software product; 
a code segment to generate a hardware ID that identifies 

the set of hardware components within the specific 

computer; 

a code segment to compute a test ID from the product ID 
and hardware ID; 

a code segment to compare the test ID to the original 
registration ID; 

a code segment to enable the software product to operate 
on the specific computer if the test and original regis- 
tration IDs match; and 

a code segment to determine if the set of hardware 
components is substantially different since the regis- 
tration ID was computed if the test and original regis- 
tration IDs do not match. 

11. A software product as recited in claim 10, wherein the 
code segment to generate a hardware ID derives a multi-bit 
hardware ID having multiple bits representing correspond- 
ing hardware components. 

12. A software product as recited in claim 10, wherein the 
code segment to generate a hardware ID derives a five-bit 
hardware ID that identifies a set of five hardware compo- 
nents within the computer, the five-bit hardware ID having 
one bit representing each of the five hardware components. 

13. A software product as recited in claim 10, wherein the 
code segment to compute the test ID hashes a concatenation 
of the product ID and hardware ID to produce the test ID. 

14. A software product as recited in claim 10, wherein the 
specific computer is upgraded from its original set of hard- 
ware components to a new set of hardware components in 
which at least one hardware component is different since the 
last time the software product was executed on the specific 
computer, the software product further comprising a code 
segment to determine, in the event that the lest and original 
registration IDs do not match, whether the new set of 
hardware components is substantially different from the 
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original set of hardware components, wherein an affirmative 
conclusion indicates that the upgraded computer is more like 
a new computer and the code segment to lock the software 
product is executed, and wherein a negative conclusion 
indicates that the upgraded computer is more like the 
specific computer and the code segment to enable the 
software product is executed. 

15. A software product as recited in claim 14, wherein: 
the code segment to generate a hardware ID derives a 

multi-bit hardware ID having multiple bits representing 
corresponding hardware components; and 
the code segment to determine whether the new set of 
hardware components is substantially different from 
the original set of hardware components tries different 
permutations of the multi-bit hardware ID, changing at 
least one bit per try while leaving at least some of the 
bits unchanged. 

16. A software product as recited in claim 10, wherein the 
hardware ID identifies a set of n hardware components, and 
in the event that the computer is upgraded from its original 
set of hardware components to a new set of hardware 
components in which at least one hardware component is 
different since the last time the software product was 
executed on the computer, the software product determines 
whether at most one-half of the n hardware components are 
different. 

17. A software product as recited in claim 10, wherein the 
hardware ID identifies a set of five hardware components, 
and in the event that the computer is upgraded from its 
original set of hardware components to a new set of hard- 
ware components in which at least one hardware component 
is different since the last time the software product was 
executed on the computer, the software product determines 
whether at most two out of the five hardware components are 
different. 

18. A method for registering a software product for use on 
a computer, comprising the following steps: 

obtaining a product ID of the software product; 

generating a hardware ID that identifies a set of hardware 
components within the computer; 

submitting the product ID and hardware ID to a registra- 
tion authority; 

receiving a registration ID from the registration authority, 
the registration ID being computed from the product ID 
and hardware ID; and 

storing the registration ID. 

19. A method as recited in claim 18, wherein the gener- 
ating step comprises the step of deriving a multi-bit hard- 
ware ID having multiple bits representing corresponding 
hardware components. 

20. A method as recited in claim 18, wherein the gener- 
ating step comprises the step of deriving a five -bit hardware 
ID that identifies a set of five hardware components within 
the computer, the five-bit hardware ID having one bit 
representing each of the five hardware components. 

21. A method as recited in claim 18, wherein the regis- 
tration ID is computed by hashing a concatenation of the 
product ID and hardware ID. 

22. A method as recited in claim 18, further comprising 
the following steps: 

starting the software product; 

obtaining the product ID of the software product; 

generating a hardware ID that identifies a set of hardware 

components within the computer; 
computing a test ID from the product ID and hardware ID; 
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comparing the test ID to the registration ID stored on the 
computer; 

if a match occurs, enabling the software product to 
operate; and 

if no match occurs, locking the software product to 
prevent it from operating. 

23. A computer-readable medium having computer- 
executable instructions for: 

obtaining a product ID of the software product; 

generating a hardware ID that identifies a set of hardware 
components within the computer; 

submitting the product ID and hardware ID to a registra- 
tion authority; 

receiving a registration ID from the registration authority, 
the registration ID being computed from the product ID 
and hardware ID; and 

storing the registration ID. 

24. A method for running a software product on a 
computer, the software product having a corresponding 
original registration ID that represents the software product 
being registered to run on the computer, the method com- 
prising the following steps: 

obtaining a product ID of the software product; 

generating a hardware ID that identifies a set of hardware 
components within the computer; 

computing a test ID from the product ID and hardware ID; 

comparing the test ID to the original registration ID; 

if a match occurs, enabling the software product to 
operate on the computer; and 

if no match occurs, determining if the set of hardware 
components has substantially changed since the origi- 
nal registration ID was computed. 

25. A method as recited in claim 24, wherein the gener- 
ating step comprises the step of deriving a multi-bit hard- 
ware ID having multiple bits representing corresponding 
hardware components. 

26. A method as recited in claim 24, wherein the gener- 
ating step comprises the step of deriving a five-bit hardware 
ID that identifies a set of five hardware components within 
the computer, the five-bit hardware ID having one bit 
representing each of the five hardware components. 

27. A method as recited in claim 24, wherein the com- 
puting step comprising hashing a concatenation of the 
product ID and hardware ID to produce the test ID. 

28. A computer-readable medium having computer- 
executable instructions for: 

obtaining a product ID of the software product; 

generating a hardware ID that identifies a set of hardware 
components within the computer; 

computing a test ID from the product ID and hardware ID; 

comparing the test ID to an original registration ID; 

if a match occurs, enabling the software product to 
operate on the computer; and 

if no match occurs, determining if the computer is sub- 
stantially the same computer associated with the origi- 
nal registration ID, enabling the software product to 
operate on the computer if the computer is substantially 
the same computer, and locking the software product to 
prevent it from operating on the computer if the com- 
puter is not substantially the same computer. 

29. A method for running a software product on a com- 
puter that has been upgraded from an original set of hard- 
ware components to a new set of hardware components in 
which at least one hardware component is different since the 
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last time the software product was executed on the computer, 
the software product having an associated original registra- 
tion ID that represents the software product being registered 
to run on the computer with the original set of hardware 
components prior to upgrade, the method comprising the 5 
following steps: 

obtaining a product ID of the software product; 
generating a hardware ID that identifies the new set of 
hardware components within the upgraded computer; 
computing a test ID from the product ID and hardware ID; 30 
comparing the test ID to the original registration ID; 
if a match occurs, enabling the software product to 

operate on the upgraded computer; and 
if a match does not occur, determining whether the new 15 
set of hardware components is substantially different 
from the original set of hardware components, wherein 
an affirmative conclusion indicates that the upgraded 
computer is more like a new computer and the software 
product is prevented from operating, and wherein a 20 
negative conclusion indicates that the upgraded com- 
puter is more like the original computer and the soft- 
ware product is permitted to operate. 

30. A method as recited in claim 29, wherein the gener- 
ating step comprises the step of deriving a multi-bit hard- 25 
ware ID having multiple bits representing corresponding 
hardware components. 

31. A method as recited in claim 29, wherein the gener- 
ating step comprises the step of deriving a five -bit hardware 
ID that identifies a set of five hardware components within 30 
the computer, the five -bit hardware ID having one bit 
representing each of the five hardware components. 

32. A method as recited in claim 29, wherein the com- 
puting step comprising hashing a concatenation of the 
product ID and hardware ID to produce the test ID. 35 

33. A method as recited in claim 29, wherein: 

the generating step comprises the step of deriving a 
multi-bit hardware ID having multiple bits representing 
corresponding hardware components; and 

the determining step comprises the step of changing at 40 
least one bit in the hardware ID while leaving at least 
some of the bits unchanged, and repeating the comput- 
ing and comparing steps. 

34. A method as recited in claim 29, wherein the hardware 
ID identifies a set of n hardware components, and the 45 
determining step comprises the step of determining whether 

at most one-half of the n hardware components are different. 

35. A method as recited in claim 29, wherein the hardware 
ID identifies a set of five hardware components, and the 
determining step comprises the step of determining whether 50 
at most two out of the five hardware components are 
different. 

36. A computer-readable medium having computer- 
executable instructions for: 

obtaining a product ID of the software product; 55 
generating a hardware ID that identifies the new set of 
hardware components within the upgraded computer; 
computing a test ID from the product ID and hardware ID; 
comparing the test ID to the original registration ID; 60 
if a match occurs, enabling the software product to 

operate on the upgraded computer; and 
if a match does not occur, determining whether the new 
set of hardware components is substantially different 
from the original set of hardware components, wherein 65 
an affirmative conclusion indicates that the upgraded 
computer is more like a new computer and the software 
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product is prevented from operating, and wherein a 
negative conclusion indicates that the upgraded com- 
puter is more like the original computer and the soft- 
ware product is permitted to operate. 

37. A method for comprising the following steps: 

(A) registering a software product for use on a computer 
having an original set of hardware components, com- 
prising the following steps: 

obtaining a product ID of the software product; 

generating an original hardware ID that identifies the 
original set of hardware components within the com- 
puter; 

submitting the product ID and hardware ID to a regis- 
tration authority; 

receiving an original registration ID from the registra- 
tion authority, the original registration ID being 
computed from the product ID and hardware ID; and 

storing the original registration ID; 

(B) subsequently running the software product on the 
computer, comprising the following steps: 
obtaining the product ID of the software product; 
generating the original hardware ID; 

computing a test ID from the product ID and hardware 
ID; 

comparing the test ID to the original registration ID; 

enabling the software product to operate on the com- 
puter if a match occurs; and 

locking the software product to prevent it from oper- 
ating on the computer if no match occurs; 

(C) in an event that the computer is upgraded from the 
original set of hardware components to a new set of 
hardware components in which at least one hardware 
component is different since the last time the software 
product was executed on the computer, performing the 
following steps: 

obtaining the product ID of the software product; 
generating a new hardware ID that identifies the new 

set of hardware components within the upgraded 

computer; 

computing a new registration ID from the product ID 
and hardware ID; 

comparing the new registration ID to the original 
registration ID; 

enabling the software product to operate on the 
upgraded computer if a match occurs; and 

if a match does not occur, determining whether the new 
set of hardware components is substantially different 
from the original set of hardware components, 
wherein an affirmative conclusion indicates that the 
upgraded computer is more like a new computer and 
the software product is prevented from operating, 
and wherein a negative conclusion indicates that the 
upgraded computer is more like the original com- 
puter and the software product is permitted to oper- 
ate. 

38, A method for preventing multiple installations of a 
software product on different computers, comprising the 
following steps: 

registering the software product for use with a first 
computer having a first set of hardware components; 

in an event that the software product is subsequently 
installed on a second computer having a second set of 
hardware components different from the first set: 

detecting the different set of hardware components; 

discerning whether the second computer is substantially 
similar the first computer in which only a subset of the 
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hardware components are different, and allowing the 
software product to operate on the second computer in 
the event that the second computer is substantially 
similar; 

disabling the software product from operating on the 
second computer in the event that the second computer 
is not substantially similar. 
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39. A method as recited in claim 38, wherein the second 
computer is substantially similar to the first computer is 
more than half of the hardware components in the set of 
hardware components are the same hardware components in 
the set of hardware components in the first computer. 
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